General
-
Target
na.elf
-
Size
418KB
-
Sample
250222-meag3atmgv
-
MD5
c8c9f183e9ba9974b73a4e688d632774
-
SHA1
02786e3b731512dde58b76ffa3aaaaef92eee239
-
SHA256
95b18c9c5da3ef5a7a68aba57da3dd552f3c800f072cf9deb2e0cf3081a419e9
-
SHA512
8559cc7f6712e71814dc63cca699353adb6760b2bc3ba497dbcf876b831bd653b7dec85e398aaea966e59ea3ec629d4647709518a430f909f2f04b068e8683e2
-
SSDEEP
12288:6QIkwT+V+46MTuxN+qpMBUH5kAAxwWVtBeSm:W4/y+qaBUZJAdVti
Behavioral task
behavioral1
Sample
na.elf
Resource
ubuntu2404-amd64-20240523-en
Malware Config
Targets
-
-
Target
na.elf
-
Size
418KB
-
MD5
c8c9f183e9ba9974b73a4e688d632774
-
SHA1
02786e3b731512dde58b76ffa3aaaaef92eee239
-
SHA256
95b18c9c5da3ef5a7a68aba57da3dd552f3c800f072cf9deb2e0cf3081a419e9
-
SHA512
8559cc7f6712e71814dc63cca699353adb6760b2bc3ba497dbcf876b831bd653b7dec85e398aaea966e59ea3ec629d4647709518a430f909f2f04b068e8683e2
-
SSDEEP
12288:6QIkwT+V+46MTuxN+qpMBUH5kAAxwWVtBeSm:W4/y+qaBUZJAdVti
-
Prometei_elf family
-
Deletes itself
-
Modifies hosts file
Adds to hosts file used for mapping hosts to IP addresses.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1